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Abstract 

We introduce a model of probabilistic debate checking, where a silent resource- 
bounded verifier reads a dialogue about the membership of the string in the 
language under consideration between a prover and a refuter. Our model com- 
bines and generalizes the concepts of one-way interactive proof systems, games 
of incomplete information, and probabilistically checkable complete-information 
debate systems. We consider debates of partial and zero information, where the 
prover is prevented from seeing some or all of the messages of the refuter, as well 
as those of complete information. The classes of languages with debates checkable 
by verifiers operating under severe bounds on the memory and randomness are 
studied. 

We give full characterizations of versions of these classes corresponding to si- 
multaneous bounds of 0(1) space and 0(1) random bits, and of logarithmic space 
and polynomial time. It turns out that constant-space verifiers, which can only 
check complete-information debates for regular languages deterministically, can 
check for membership in any language in P when allowed to use a constant num- 
ber of random bits. Similar increases also occur for zero- and partial- information 
debates, from NSPACE(n) to PSPACE, and from E to EXPTIME, respectively. 
Adding logarithmic space to these constant-randomness verifiers does not change 
their power. When logspace debate checkers are restricted to run in polyno- 
mial time without a bound on the number of random bits, the class of debatable 
languages equals PSPACE for all debate types. We also present a result on the 
hardness of approximating the quantified max word problem for matrices that is 
a corollary of this characterization. 
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1 Introduction 



An alternating Turing machine for a language L can be viewed [10] as a system where a deterministic 
Turing machine (the "verifier" ) makes a decision about whether the input string is a member of L 
upon reading a "complete-information" debate on this issue between a "prover" and a "refuter." 
Reif [16] has shown that the class of languages with debates checkable by space-bounded verifiers 
is enlarged significantly when the debate format is generalized so that the refuter is allowed to hide 
some of its messages from the prover: For constant-space verifiers, the class of languages with such 
partial-information debates is E, whereas the corresponding class for complete-information debates 
is just the regular languages. Zero-information debates, where the refuter is forced to hide all its 
messages from the prover, correspond to the class NSPACE(n) under this resource bound [15J. 

The case where the verifier is upgraded to a probabilistic Turing machine has first been studied 
by Condon et al. [5], who showed that polynomial-time verifiers that use logarithmically many 
random bits, and read only a constant number of bits of a complete-information debate can handle 
every language in PSPACE. Demirci et al. [8] initiated the study of probabilistic verifiers for 
partial-information debates, and proved some lower-bound results under certain restrictions on the 
behaviors of the prover and the refuter. 

Analyzing the power of computational models under severe resource bounds often gives insight 
about their nature. In this paper, we characterize the three classes of languages that have com- 
plete, zero, and partial-information debates with constant-space verifiers which use only a constant 
number of random bits, independent of the length of the input, as P, PSPACE, and EXPTIME, 
respectively. We also consider verifiers for all these three types of debates with simultaneous 
logarithmic-space and polynomial-time bounds, without constraining the number of coin tosses, 
and show that the corresponding classes coincide with PSPACE. Our proofs do not depend on the 
restrictions of [8] on the prover and the refuter. 

The rest of the paper is structured as follows: Section [2] describes our debate checking model and 
relevant previous work. We examine the power of constant-randomness checkers with simultaneous 
small space bounds for the three debate types mentioned above in Section [3j Section 2] contains 
a characterization of languages with debates checkable by logspace polynomial-time verifiers. A 
nonapproximability result that follows from our work is presented in Section [5j Section [6] is a 
conclusion. 

2 Preliminaries 
2.1 The model 

Our formal model of debate systems combines and generalizes the concepts of one-way interactive 
proof systems 0U], games of incomplete information [16, 15J, probabilistically checkable complete- 
information debate systems [H |6] , and our previous work on asymmetric debates [8] . The verifier 
is a probabilistic Turing machine (PTM) with a read-only input tape and a single read/write work 
tape. The input tape holds the input string between two occurrences of an end-marker symbol, 
and we assume that the machine's program never attempts to move the input head beyond the 
end-markers. The input tape head is on the left end-marker at the start of the process. The verifier 
reads information written by the prover and the refuter, (conventionally named Player 1 and Player 
0, and denoted PI and P0, respectively,) by alternately consulting two reading cells, CI and CO. 
When it is consulted for the ith time, cell CI returns the ith symbol in Pi's argument for the 
membership of the input string in the language under consideration. CO similarly yields the next 
symbol in PO's counterargument. The symbols used in this communication are chosen from three 
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alphabets named Ti, Tq, and A, such that To H A = 0. For i G {0, 1}, Tj is the set of symbols 
emittable by Pi that can be seen by the opposing player. A is the set of private symbols that P0 
may choose to write to the verifier without showing to PI. P0 can use any member of Tq U A in 
its messages. PI (resp., P0) is assumed to have seen the subsequence of all the public symbols 
(i.e. those in Tq and Ti) among the first i — 1 (resp., i) symbols emitted up to that time before 
preparing its ith symbol. Using this communication infrastructure, PI attempts to convince the 
verifier that it is right, and P0 tries to prove PI wrong. We allow the possibility that the cheating 
player sends an infinite sequence of symbols, in order to try to make the verifier run forever, rather 
than to arrive at the correct decision. The verifier also has access to a source of private random 
bits. The state set of the verifier TM is Q, containing, among others, two special halting states, q a 
(accept) and q r (reject). One of the non-halting states is designated as the start state. 

Two (possibly different) subsets R and T of Q are designated as the sets of reading and coin- 
tossing states, respectively. R is partitioned to two subsets, R\ and Rq, where the program of 
the machine (to be described shortly) ensures that the first reading state to be entered is in R\, 
and the sequence of reading states entered during computation alternates between members of 
R\ and Rq. Whenever a state q G Ri is entered, the next symbol of Pi's message is written in 
reading cell Ci. Let = {—1,0,-1-1} denote the set of possible head movement directions. The 
program of the verifier is formalized by the transition function 8 as follows: For i G {0, 1} and 
q G RidT — {q a , q r }, 5(q, (, 9, a, b) = (q' , 9', dih, d w h) means that the machine will switch to state 
q', write 9' on the work tape, move the input head in direction d^ G 0, and the work tape head in 
direction d w h G 0, if it is originally in state q, scanning the symbols 9, and a in the input and 
work tapes, and the reading cell Ci, respectively, and seeing the random bit b as a result of the coin 
toss. If q G T — (RU{q a , q r }), a restricted version of the verifier transition function described above 
that does not involve the symbol from the reading cell is applied. For q G Q — T, the program's 
access to the reading cells is again determined by whether q is in i?o ■, Ri , or Q — (T U R) as described 
above, but with restricted transitions that do not use a random bit. 

A configuration of the verifier is a 4-tuple containing its state, head positions, and work tape 
contents, as usual. Configurations whose state components are in the set R will be called reading 
configurations. 

We will now describe an infinite tree, called the debate tree. The even-numbered levels (including 
level 0, containing the root node) of the debate tree will correspond to points in the debate where it 
is Pi's turn to speak, so nodes at those levels are called PI nodes. The remaining levels correspond 
to P0. Each PI node has |Ti| children, with each one of the edges connecting it to its children 
corresponding to a different symbol that PI can emit at that point in the debate. Each P0 node 
has |ro| + |A| children, with a similar meaning. The edges connecting a P0 node to its children are 
called P0 edges. 

At any point in the debate, PI can base its decision on what to say next on the sequence of 
P0 symbols that it has "seen" up to that moment. Let h : (ro U A) — > (ro U {t>}) be a function 
such that h(a) = a for all a G Tq, and h(a) = b for all a G A, where b is a "blank" symbol, not in 
Tq U A. For any PI node N, the P0 sequence seen by N is created by starting with the empty list, 
and adding h(a) for each symbol a one encounters at P0 edges while walking from the root node 
down to N. 

A debate subtree is a subtree of the debate tree where each PI node has just one child, and each 
P0 node has |To| + | A| children. A debate subtree is said to be well-formed if two PI nodes, say, N\ 
and N2, at the same level emit different symbols only if the P0 sequences seen by N\ and N2 are 
different. Intuitively, this well-formedness condition corresponds to our desire that Pi's messages 
should reflect the level of ignorance that it has about the private messages of P0. 

Formally, a debate is a sequence of symbols that labels an infinite path starting at the root 
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node of a well-formed debate subtree. The general definition we have given corresponds to partial- 
information debates. When A = 0, (i.e. PO never emits private symbols), one has a complete- 
information debate. The other extreme, where PO never emits public symbols (ro = 0), corresponds 
to zero-information debates. 

We will associate languages with debate systems in two different ways. We start with the 
"strong" definition. 

The probability that a verifier V accepts an input string w (i.e. ends up in q a ) as the result 
of watching a debate tt between PI and PO presented to it through the reading cells as described 
above is denoted by P(a)^ V7T y P(f)fv-K) denotes the probability that V rejects w in such a scenario. 

We say that language L has a debate checkable with error probability e if there exists a verifier 
V such that 

1. for every w 6 L, there is a well- formed debate subtree on which, for all debates ir labeling a 
path of this subtree, P{a)™ v ^ > 1 — e, and, 

2. for every w £ L, on all well-formed debate subtrees, there exists a debate tt labeling some 
path of the subtree such that P(r)™ v ^ > 1 — e. 

When we replace item (2) above with the following condition, we obtain the "weak definition" 
of debate checking: 

2. for every w ^ L, on all well-formed debate subtrees, there exists a debate tt labeling some 
path of the subtree such that P(a)^ /jr ^ < e. 

CDEB(s,i,r) is the class of languages that have complete-information debates checkable with 
some error probability e < |, such that the verifier of the debate uses s(n) space, t(n) time, and 
r(n) random bits. Classes of languages that have partial-information debates and zero-information 
debates with these restrictions have names of the form PDEB(s, t, r) and ZDEB(s, t, r), respectively. 
CDEB w (s, t, r), PDEB^(s, t, r), ZDEB„,(s, t, r) are the corresponding classes of languages recognized 
according to weak definition. Note that, since these "weak" debate systems are less constrained 
than the "strong" ones of the previous definition, the xDEB classes are always contained in the 
corresponding xDEB„, classes for x € {C,Z, P}. We use notations cons, log, poly, exp to stand for 
functions in 0(1), O(logn), 0(n c ), 0(2™°), respectively, for any constant c. If there is no restriction 
on a resource, we indicate this by oo. When the randomness parameter is set to 0, this indicates 
that the verifier is deterministic. 

We differentiate between the class of languages that have debates checkable with some error 
probability, and the class of languages that have debates checkable for all positive error probabilities 
e < 2- The latter is denoted by adding an * at the end of the corresponding class name (e.g. 
PDEB* (s,t, r) is the class of languages that have partial information debates for all positive error 
bounds s < i). The xDEB* classes are of course always contained in the corresponding xDEB 
classes. 

2.2 Relation to previous work 

The alternating Turing machines (ATMs) of [1] correspond precisely to deterministic verifiers read- 
ing complete-information debates in our terminology. The state set of an ATM is partitioned to sets 
of existential and universal states. In the parlance of Section [2. H the existential states correspond 
to the set R\, and the symbol sent by PI and read from CI corresponds to the "existential choice" 
made by the ATM at that step. Universal choices correspond to PO symbols in a similar way. Some 
well-known facts regarding ATMs can be phrased in our setup as follows: 
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Fact 1. CDEB(s(ra),oo,0) = ASPACE(s(n)) = DTIME(2°( s ( n ))) for any s(n) > log n. 

Fact 2. CDEB(oo,t(n),0) = ATIME(i(n)) = DSPACE(t(n)) for any t(n) > n. ^ 

Reif [16J introduced a natural extension to alternation by giving computational models for games 
of incomplete information, where the existential player does not have access to all of the opponent's 
moves. To incorporate this notion to the alternating Turing machine framework, Reif augmented 
the ATM model with private work tapes and private states in addition to the usual tapes and 
states that are common to both "players." In a private alternating Turing machine (PATM), only 
the universal states can execute moves that can see or change the content of the private tapes and 
states. This prevents the strategy of the existential player from depending on the content of private 
tapes and states, effectively enforcing the same condition mentioned in our definition of well-formed 
debate subtrees on the existential choices. When the universal states of a PATM are forbidden to 
make moves that change the common memory elements, we get a blind alternating Turing machine 
(BATM). The equivalence of these two models to our setup with deterministic verifiers reading 
partial and zero-information debates, respectively, is demonstrated in the Appendix. We know the 
following facts about the language recognition power of PATMs and BATMs. 

Fact PDEB(s(n),oo,0) = PASPACE(s(n)) = DTIME(2 2 ° (s(n)) ), 
aC " ZDEB(s(n),oo,0) = BASPACE(s(n)) = DSPACE(2°( s ( n ))) for any s(n) > logra. EE/ 

PDEB(oo,t(n),0) = PATIME(t(n)) = 
' ZDEB(oo,t(n),0) = BATIME(t(n)) = DSPACE(t(n)) for any t{n) >n. JW] 

An interactive proof system (IPS) can be seen as a variant of our model where PO says nothing, 
and the verifier is allowed to exchange messages with PI. An IPS with perfect completeness, that 
is, a guarantee that members of the language are accepted with probability 1, can be transformed to 
a PATM with the same space and time bounds by just viewing the the coin-tosses of the verifier as 
private universal moves, and the branchings due to the prover messages as possible existential moves 
of the PATM. By combining the facts that every IPS can be assumed to have perfect completeness 
[9], and that PS PACE equals the class of languages that have IPSs with polynomial-time logspace 
verifiers [31 [IB] with FactUl we conclude the following about simultaneously space and time bounded 
PATMs: 

Fact 5. PDEB(log,poly,0) = PSPACE. 

Constant-space versions of alternating machines have also been studied: (REG denotes the class 
of regular languages.) 

CDEB(cons,oo,0) = REG, JZf 
Fact 6. ZDEB(coras,oo,0) = NSPACE(n), HEj 
PDEB(cems,oo,0) = E. TWj 

It is well known that multiple input heads are equivalent to logarithmic space [IT], for instance, 
the class of languages recognized by deterministic multihead finite automata is precisely L. This 
equivalence carries over to the nondeterministic, probabilistic |14| . and alternating versions of these 
machines: Alternating multihead finite automata with two-way access to the input (denoted 2afa(/c) 
for k input heads) are known to characterize alternating logspace: (2AFA(A;) denotes the class of 
languages recognized by 2afa(/c)s.) 

Fact 7. Ufc>i2AFA(/c) = P. |H|/ 
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When the input heads are defined as resources private to the universal player, and state infor- 
mation is used for public communications, it can be shown, again with the technique of [11] . that 
blind and private alternating multihead finite automata (2bafa(A;)s and 2pafa(/c)s, respectively,) 
are equivalent to the corresponding logspace models. We name the k-he&d classes associated with 
these machines 2BAFA(/c) and 2PAFA(/c), respectively. 

U fc >i2BAFA(£:) = BASPACE(/o 5 ) = PSPACE, 
U fc >i2PAFA(A;) = PASPACE(/o 5 ) = EXPTIME. 



3 Constant randomness 

Condon et al. [5] initiated the study of probabilistic debate checking with their work on complete- 
information debates. They only considered polynomial-time and logarithmic-randomness bounds on 
their verifiers. In this section, we characterize the languages that have debates checkable by verifiers 
that are allowed to use only constant amounts of memory and randomness, not just for complete-, 
but also for zero- and partial- information debates. Our results here are obtained by adapting a 
technique discovered by Say and Yakaryilmaz [T7] for simulating nondeterministic logarithmic-space 
machines by verifiers under these strict resource bounds. Note that one other difference between the 
model of [5] and ours is that our verifiers do not have the capability of accessing desired locations 
of the debate directly, and must read the debate sequentially until they arrive at a decision. 

Lemma 1. P C CDEB^(cons, oo, cons). 

Proof. Let L be any language in P, and let M be the 2afa(fc) recognizing L by Fact [3 We will 
construct a constant-space verifier which tosses only a constant number of coins while checking 
complete-information debates about membership in L with a desired positive error probability e 
according to the weak definition. 

Without loss of generality, we make certain assumptions about M: All states of M are either 
existential or universal. The starting and the halting states of M are existential. Each existential 
and universal state leads exactly to two different branches, and computation alternates between 
existential and universal states. 

In the debate, PI and PO are supposed to be talking about the step-by-step execution of M 
on the input string w in a sequence of exchanges, each of which treats a pair of M-steps. Each 
exchange has the following structure: 

• PI announces its claim about which existential choice to be made by M at the present step 
guarantees reaching an accept state eventually. PI also gives a list of k tape symbols of M, 
claiming that the ith. head of M will be scanning the zth symbol in this list after taking the 
step just announced by PI, for all i, where 1 < % < k. 

• PO announces the universal choice of M for the next step that it claims will lead to a rejection 
of w. 

• PI announces the list of k tape symbols which it claims that will be scanned by M's heads 
after the execution of the universal step according to the choice just specified by PO. 

(Our definition in Section [2] stipulates that PI and PO should alternate after emitting each symbol. 
The protocol here can be made to fit that requirement, since the "packages" sent by PI are of fixed 
length, and PO can emit dummy symbols while listening to them. The verifier can measure the 
length of the packages using its constant-sized memory, and reject the input if it sees PI giving a 
package of the wrong length.) 
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If PI claims that the set of moves described up to that point in the debate will have caused 
M to halt with acceptance, it emits the special symbol (3 indicating this claim, and restarts the 
procedure by giving the first existential choice from the initial configuration of M on w. 

We now describe the verifier V. V will read the debate to simulate the execution of M on 
the particular computation path indicated by the alternating messages of PI and PO. It starts 
by initializing a counter to 1, and randomly selecting one of the k heads of M, using r = [log A;] 
random bits. Each head has a probability of at least 2 _r to be selected. V uses its single input 
head to track the position of the selected head during its simulation of M. V needs to know what 
the other heads are scanning in order to compute M's next state at any step, and it depends on 
PI for this information. After each simulated step, V checks if the symbol scanned by its input 
head is consistent with what PI claims about the corresponding head of M. If it sees that PI is 
lying in this regard, V rejects the input. Otherwise, it continues by reading the next exchange. If 
V sees M reaching a reject state during the simulation, it rejects. If PI emits a O, V checks if its 
simulation of M has indeed reached an accept state. If V sees that M has not accepted despite 
PI announcing that it has, it rejects. If M is seen to have accepted, V increments the counter. If 
the counter has exceeded c, whose value will be discussed below, V accepts. Otherwise, V moves 
its head to its original position, randomly picks a head of M to track, and starts processing the 
restarted debate. 

If uu £ L, PI can always find a way of responding to PO that will lead M to acceptance, 
while giving correct information about the symbols scanned by the heads, so V will accept with 
probability 1. If w £ L, PI must lie about at least one head at some point to prevent V from 
rejecting. This lie will be caught, and V will therefore reject, with probability at least 2~ r , in every 
simulated computation of M. The probability that V will fail to pick the head that PI is lying 
about in all c iterations of the loop is (1 — 2~ r ) c , which can be tuned to be below e by choosing a 
sufficiently large c. 

An evil PI can cause V to spend infinite time without ever restarting the computation of M 
with probability at most (1 — 2~ r ). We conclude that V is a weak debate checker for L with the 
desired properties. □ 

Lemma 2. P C CDEB(cons, oo, cons). 

Proof. Consider the verifier V from the proof of Lemma [1] with the number of iterations c set to 1. 
Recall that this V uses r = [log fc] random bits to simulate one run of the 2afa(fc) that recognizes 
a language L in P. V accepts input strings in the language with probability 1, and rejects strings 
not in the language with probability 2~ r . 

To increase the rejection probability for nonmembers so that the resulting machine fits the 
definition in Section [2J we construct a new verifier V', which starts by using an additional r + 1 
random bits to reject the input directly with probability ^ r +i , and transfers control to V with the 
remaining probability. V 1 can be seen to accept inputs in L with probability at least 1 — ( \ r +l ) = 
Cfpr, and rejects the inputs not in L with probability 2~ r (Crr) + f^rr = §2ftt- Thus, V 
constitutes a debate checker for L according to the strong definition with error bound oir+i ■ ^— ' 

We now derive some time bounds that will be useful in our characterization theorems. 

CDEB w (log, oo, cons) C CDEB(log, poly, cons), 
Lemma 3. ZDEB w (log, oo, cons) C ZDEB(Zog, exp, cons), 
PDEB W (log, oo, cons) C PDEB(log, exp, cons). 
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Proof. We start by showing that a complete-information debate checkable by a verifier using log- 
arithmic space and a constant amount of random bits does not need to be longer than some 
polynomially bounded number of symbols. 

Let V be the logspace verifier for a language L £ CDEB w (log,oo,cons) that uses at most r 
random bits for some constant r. V can be derandomized as a collection of 2 r deterministic logspace 
verifiers S={Vi, V2, ••, Vj^} for each different assignment to the random sequence of length r, such 
that, for inputs in L, the common debate that the verifiers in S are reading eventually makes 
more than half of them accept. Each Vi can be in one of polynomially many different possible 
configurations. Let E be the set of all possible combined states of the "ensemble" consisting of 
these verifiers. The cardinality C of E is itself polynomially bounded. 

For any string w £ L, we know that there is a debate subtree, i.e. a "best strategy" for PI, 
where PI "wins" in every branch by steering V toward an ensemble with a majority of accepting 
configurations. If a debate corresponding to a particular branch of that tree has been going on for 
more than C turns without reaching such an "accepting" ensemble, this means that PI does not 
have a sequence of clever responses to prevent PO from causing a loop of ensemble states, and so this 
debate will never end up with an accepting ensemble. This contradiction leads us to conclude that 
no complete-information debate that is checkable by a constant-coin logspace verifier needs to have 
super polynomial length. We construct a new verifier that simulates V, while using its logarithmic 
memory to clock this simulation, cutting off and rejecting when either V is seen to enter an infinite 
loop without reading debate symbols, or when the debate goes on for too long. 

For partial-information debates, we modify the argument above to take the increased ignorance 
of PI about the state of V into account. Since PI does not know what PO has been saying to 
V, it does not know precisely what ensemble state V is in at any point during the debate. From 
Pi's point of view, V can be in this or that ensemble state, having received this or that message 
from PO, so Pi's strategy has to be based on viewing V as being in a set of possible ensemble 
states that are consistent with what little PI knows about PO's messages up to that point [15J, 
and finding an argument that would lead all those ensembles to acceptance. We now see that 
any partial-information debate longer than the cardinality of the power set of E must involve a 
repetition of a set of ensembles, which means a failure for PI. By the same reasoning as above, 
no partial-information debate that is checkable by a constant-coin logspace verifier needs to have 
super exponential length. 

Blind alternating Turing machines can count up to 2 2S< ™' using s(n) space for all s(n) > logn 
(see Theorem 1 in [IS])- We can integrate this counting mechanism to any logspace constant-coin 
verifier to reject the input if the partial- information debate that it has been reading has exceeded 
the exponential time bound derived above. □ 

Lemma 4. CDEB(log, poly, cons) C P. 

Proof. Let L be a language in CDEB(Zo<?, poly, cons). Let V be the polynomial-time, logspace 
verifier that checks complete-information debates about L with bounded error using r random bits. 
Without loss of generality, we assume that each configuration of V that reads CI is immediately 
followed by a configuration that reads CO. We construct an alternating logspace Turing machine 
M that recognizes L. 

As in the proof of Lemma El we think of V as a collection of 2 r deterministic logspace verifiers 
S={Vi, V2, .., V^}. M simulates the elements of S in a time-sharing fashion. It first advances each 
Vi until they reach their first reading configuration, or halt. When all the Vi that have not halted 
yet are ready to consume a prover symbol, M branches existentially to produce a symbol from T\, 
and feeds this symbol to all those ViS. M then branches universally to produce a symbol from Yq 
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to feed to the verifiers waiting to read CO. M keeps simulating each Vi in this fashion by feeding 
them alternately produced symbols as the next pair of messages of the debate. Since all the V^s 
use logarithmic space, the simulation also takes logarithmic space. M accepts if more than half of 
the deterministic verifiers in the set S has accepted. Otherwise, M rejects the input string. □ 

We have proven 

Theorem 1. CDEB(cons, oo, cons) = CDEB(Zog, poly, cons) = P. 
Lemma 5. PSPACE C ZDEB(cons, oo, cons). 

Proof. Let L be any language in PSPACE, and let M be the 2bafa(/c) recognizing L. We will first 
modify the construction in the proof of Lemma [1] to build a verifier V which rejects strings not in L 
with probability 1, and accepts the members of L with probability at least 2 _ r iogfc l. We will then 
convert V to a debate checker that fits the strong definition, in a manner similar to what we did 
in Lemma [21 

V initially picks one of M's heads randomly, and simulates M according to existential and 
universal choices suggested by PI and PO, respectively. In Lemma (TJ PI was the player who is 
supposed to send the symbols scanned by the heads of the multihead automaton that is being 
simulated. This is not acceptable in this case, since the configuration of M during its execution 
depends on choices made by its universal player, and Player 1 in the zero-information protocol that 
we are designing cannot have that information. PO, on the other hand, can see the full configuration 
of M, just as the universal player of a 2bafa(A;), and it is therefore PO who provides the symbols 
scanned by the heads of M. V accepts the input if it reaches an accept state of M, or detects an 
inconsistency between its own input and the claim made for the head that it is tracking by PO. 
Otherwise, V rejects. 

Therefore, V accepts inputs in L with probability at least 2 _r , using r = [log A;] random bits. 
It rejects inputs not in L with probability 1. We construct a new verifier V that accepts directly 
with probability 2 Z.+l , and transfers control to V with the remaining probability. Then, V' accepts 
inputs in L with probability at least ^.'-+1 ? an d rejects the inputs not in L with probability ^-pr. 
V' is therefore a strong zero- information debate checker for L with error bound ^r+i ■ D 

Lemma 6. ZDEB(log, exp, cons) C PSPACE. 

Proof. Let L be any language in ZDEB^og, exp, cons), and let V be the constant-coin, exponential- 
time logspace verifier of zero-information debates on L. We build a logspace blind alternating Turing 
machine M recognizing L. The construction is almost identical to that of the proof of Lemma HI 
Since the debates of V are zero-information, M simulates the 2 r deterministic verifiers (the V^s) 
on the private tape of the universal player, feeding them symbols from the private alphabet A, 
ensuring that the moves of the existential player obey the zero-information condition. Logaritmic 
space is sufficient for this simulation. As in Lemma [U M accepts if and only if more than half of 
the ViS accept, which happens if and only if the input is in L. □ 

Lemmas [5] and [6] form 
Theorem 2. ZDEB(cons, oo, cons) = ZDEB(log, exp, cons) = PSPACE. 

We conclude this section with a characterization for partial-information debates. 
Theorem 3. PDEB(cons, oo, cons) = PDEB(log, exp, cons) = EXPTIME. 
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Proof. We will describe the necessary modifications to the proofs of Lemma [5] and [6l 

First, we can design partial-information debates with constant-space verifiers allowed to use only 
a constant number of random bits to simulate the 2pafa(/c) of any given language in EXPTIME, 
thereby showing EXPTIME C PDEB(cons, oo, cons). The only difference with the construction in 
Lemma [5] is that PO is allowed to use the public alphabet Tq as well as the private alphabet A for 
suggesting the public and private moves of the universal player of the simulated 2pafa(fc). 

Second, simulation of exponential-time constant-randomness logspace partial-information de- 
bate systems by logspace private alternating Turing machines implies PDEB(log, exp, cons) C 
EXPTIME. The simulation is similar to the one in Lemma O but the private alternating TM 
now produces symbols by universal branching from the set Tq U A when it needs the next message 
of PO in the debate. If the produced symbol is from Tq, the PATM lets the existential player know 
this symbol by writing it in a special memory cell on the common work tape. The task of simulating 
the finitely many exponential-time deterministic verifiers is completed in exponential time. □ 

4 Logarithmic space and polynomial time 

Condon [J] has shown that languages recognized by one-way interactive proof system^] with simul- 
taneously polynomial-time and logarithmic-space bounded verifiers are polynomial time reducible 
to the max word problem for matrices, which is a variation of the well-known word problem for 
matrices. We use her technique below to show that all languages which have partial-information 
debates checkable by similarly bounded verifiers are in PSPACE. 

Lemma 7. PDEB(log,poly, oo) C PSPACE. 

Proof. Let V be a logspace verifier that checks a partial-information debate for a language L with 
error probability e, halting after reading It symbols of the debate for some polynomial t in the input 
length. Let T\, To, and A denote the public and private alphabets of the players as usual. Without 
loss of generality, assume that the initial and halting states of V are in the set R± (associated 
with reading cell CI). Since V uses logarithmic space, we can assume that it has 2m reading 
configurations, where m is a polynomial in the input length. Order these configurations so that the 
first m have their state components in R\ , whereas the ones from positions m + 1 to 2m have their 
state components in Rq. Make sure that the initial configuration is at position 1. We will build a 
polynomial-time private alternating Turing machine M for L. 

On a specific input string w, we define p(i,j,o~) as the probability of V eventually reaching 
reading configuration j (without visiting any other reading configurations in between) from reading 
configuration i where it reads the symbol a in the corresponding reading cell. Since the computation 
of V alternates between reading CI and CO, p(i,j,cr) = for both i,j < m, and i,j > m. 
Furthermore, the value of any p(i,j, a) depends only on w, i, j, a, and the transition function of V, 
and can be computed in polynomial time, using the procedure explained in detail in the proof of 
Theorem 2.1 in [40. We define two sets W P0 = {W 0>a \ a G T U A} and W P1 = {W\ >(T \ a € rj, 
where each Wo, CT is an m x m matrix containing p(i + m,j,cr) as the jth entry of its ith row, and 
the Wi iC -s are matrices with p(i, j + m, a) as the jth entry of the zth row, for 1 < i, j < m. 

M prepares these two sets of matrices, and then starts picking matrices from Wp\ and Wpo via 
existential and universal moves, respectively. Universal choices are made on the private work tape 
of M. If the universally chosen matrix corresponds to a symbol a from Tq, M lets the existential 

1 One-way interactive proof systems are just debate checkers which listen only to PI. See, for instance, [IT] for a 
review. 

2 Note that what we call the "reading configurations" are named "communication configurations" in [¥]. 
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player know about the decision by writing a on the public work tape. M continues this process 
until the existential and universal players have picked t matrices each, at which point M calculates 
the product W of these matrices in the order they were chosen. Let v and / be two vectors with m 
entries, v has a 1 in the first position, and everywhere else. / has l's in the positions corresponding 
to accepting configurations according to the ordering we defined above, and everywhere else. M 
accepts if the product vWb T is greater than 1 — e. Otherwise, it rejects. 

We have seen to it that the jth entry of vW is the probability that V reaches the jth reading 
configuration after reading the partial-information debate corresponding to the moves of M, and 
that M accepts if and only if the overall accepting probability of V in this case is sufficiently high. 
We conclude that M recognizes L. □ 

Lemma [7] and Fact \5\ show that no amount of randomness can help a polynomial-time logspace 
verifier reading partial- information debates to "break the PS PACE barrier." We now show that this 
is different for complete-information debates. Recall that CDEB(Zo<7, oo, 0) = P. 

Tpmma 8 PSPACE - ^EB* (log, poly, poly), 
' PSPACE CZDEB* (log, poly, poly). 

Proof. Let L be a language in PSPACE, and let M be the polynomial-time alternating Turing 
machine recognizing L. Let t be the time bound of M for some polynomial t in the input length. 
Without loss of generality, we assume that all configurations of M are either existential or universal, 
the initial and halting configurations are existential, and any computation of M always alternates 
between existential and universal configurations. We build a polynomial-time logspace verifier V 
that checks complete-information debates about whether M accepts the input string. Let e be the 
desired error bound of V. 

As we had in the protocol described in the proof of Lemma O PI and P0 are supposed to 
provide the existential and universal choices of the simulated machine M to the verifier. Since 
V does not have the resources to store a configuration of M, P0 is also expected to be giving a 
description of the configuration of M after each simulated step. V requires each such configuration 
description to be exactly t symbols long, so P0 pads these messages with blanks when necessary. 
The players are supposed to restart the procedure after precisely t configuration descriptions have 
been transmitted to V. 

Using logarithmic space, V can easily check that the number and the length of the configurations 
presented by P0 are legal. It is also easy for V to check if the first configuration message matches the 
initial configuration of M. However, checking whether the present configuration sent by P0 follows 
from the previous one is not something that V can do deterministically with this little memory. 
Instead, V randomly picks an integer k (1 < k < t — 2) at the beginning of each simulation of 
M, and compares only the feth, (k + l)th and (k + 2)th symbols of the ith configuration with the 
corresponding symbols of the (i + l)th configuration, for 1 < i < t — 1. If it sees a violation of the 
transition rules of M within this window, V detects PO's lie, and accepts the input. If V fails to 
find any such error by P0 in d = |"lni]t successive simulations of M, all of which are accompanied 
with computation paths ending with rejecting configurations, it rejects. 

If the input string is not in L, there is a computational path of M which ends with a rejecting 
configuration no matter which existential choices are made by PI, and V rejects with probability 
1 when this path is presented. Otherwise, P0 must sneak a transition error somewhere so that 
it can end up with a rejecting configuration. In any single simulation of M, V will fail to catch 
such a transition error with probability at most The probability that a member of L will be 

rejected by V is thus (^-f-) d , which can be shown to be not more than e. It is clear that V runs in 
polynomial time. 
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To prove PSPACE C ZDEB* (log, poly, poly), we use the same setup to simulate a polynomial- 
time blind alternating Turing machine in a zero-information debate checkable by a polynomial-time 
logspace verifier. In this case, PI should not know about the universal choices of the simulated 
blind alternating machine. PO guarantees this condition by using only the private alphabet A to 
talk to V. □ 

Thus, we have shown that allowing polynomial-time verifiers of complete-information debates 
to use polynomial amounts of randomness lets us constrain their space bounds logarithmically, 
without decreasing their power. Giving PO further privacy does not add to the power under these 
bounds. 

Theorem 4. CDEB(log , poly , oo) = ZDEB(log,poly, oo) = PDEB(log,poly, oo) = PSPACE. 



5 Nonapproximability of the quantified max word problem 

The quantified max word problem for matrices (QMW problem) is defined as follows. Given a finite 
set M oimxm matrices, two m-length vectors v and w, a bound c, and quantifiers Qi S {3, V}, is it 
possible to satisfy the inequality Q\M\Q2M2...QkM] t \vM\M2-..M\ l w T > c], where the Mj variables 
will be selected from the members of M, for 1 < % < kl 

The proof of Lemma [7] reveals that every language in CDEB(log,poly, oo) is polynomial-time 
reducible to the QMW problem. Therefore, the QMW problem is PSPACE-hard. The fact that 
any instance of the QMW problem can be solved using polynomial space by a simple exhaustive 
depth-first search on the finite game tree of the instance implies the following. 

Corollary 1. The quantified max-word problem for matrices is PSPACE-complete. 

We now consider the maximization version of the QMW problem, MAX-QMW. Suppose that the 
matrices in the inequality of an instance II of the QMW problem are chosen by two players named 
PI and PO. In particular, PO and PI choose matrices quantified by V and 3, respectively, in the 
order of quantification. Their game returns the result of the matrix multiplication v M\M2...MkW T . 
Let fin be the maximum number that player PI can guarantee to get as the product at the end, no 
matter what player PO does. MAX-QMW is the function from the domain consisting of instances 
of the quantified max-word problem to their f2 values. 

We say that a function g(x) can be approximated within factor f(n) > 1 if there is a polynomial- 



for any x in the domain of 



time algorithm which outputs a value in the interval f{\x\) ' 9( x )f(\ x \) 

g(x)- 

We now state a corollary of Lemma [7J It is shown in essentially the same way with Theorem 
3.1 of which uses a result on one-way interactive proof systems that is similar to our Lemma [71 

Corollary 2. The maximization version of the QMW problem cannot be approximated within factor 
n c in polynomial time for any constant c > 0, unless P = PSPACE. 



6 Concluding remarks 

One of the motivations for our model was to distinguish the three agents (V, PI, and PO) in the 
debate checking scenario clearly from each other. Interpretations of the alternating TM variants, 
as well as some other models such as Condon's probabilistic game automata [2], sometimes merge 
the universal player and the verifier, and make it difficult to ask certain questions that are quite 
natural in the three-person model. One such question is whether anything changes if we make 
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the coins of the verifier public to the provers. In the model of [2], V's coins are always visible to 
PO, and Condon shows that the class of languages with what we would call complete-information 
debates checkable with logspace verifiers whose coins are public to both PI and PO is contained in 
NP. Our demonstration that CDEB(log, poly , poly) = PSPACE (Theorem H]) therefore constitutes 
strong evidence that keeping the coins private increases the power of debate checkers. 

We have seen that increasing the amount randomness available to the verifier enlarges the class 
of languages with complete- information debates, as demonstrated by the relations 

CDEB(coras, oo, 0) = REG C CDEB(cons, oo, cons) = P, 

and possibly by 

CDEB(log, poly, cons) = P C CDEB(log, poly, poly) = PSPACE. 

What is the effect of intermediate amounts of randomness, for example, can we characterize 
CDEB(log,poly, log)? 

When logspace polynomial-time verifiers on complete-information debates are allowed to use 
polynomially many coins, their language recognition power increases (Fact [U and Theorem H]), 
whereas similarly bounded verifiers on partial-information debates do not gain any additional 
power by randomness (Fact [5] and Theorem H]). Since we do not know any characterization of 
ZDEB(log , poly , 0), whether randomness confers any benefit to logspace polynomial-time verifiers 
for zero-information debates is an open question. 
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A Equivalence of our model and private alternation 

Lemma 9. Given a PATM (resp. BATM) recognizing a language L, one can construct a determin- 
istic verifier which checks partial-information (resp. zero-information) debates about membership 
in L, and has the same time and space bounds with the given PATM (resp. BATM). 

Proof. Let M be the given private alternating Turing machine. (The construction for blind alter- 
nating Turing machines is identical.) We assume without loss of generality that the set of universal 
states of M is partitioned to two subsets S pr i and S pu b, so that the machine can make moves that 
can change only the private (resp. public) portions of memory from states in S pr i (resp. S pu b). We 
show how to construct a deterministic verifier V that checks partial-information debates about L. 

V has the same state set as M . The universal and existential state sets of M correspond to 
Rq and R\ (sets of states that read CO and CI to see which way to branch), respectively, in the 
verifier. Rq is further partitioned to Ro tPr i and Ro tPU b, corresponding to S pr i and S pu b, respectively. 
The program of V mimics that of M, but takes care of the following issue: States in Ro tPr i expect 
PO to write a symbol from the private alphabet A in the reading cell, and jump to the accept state 
otherwise. Similarly, PO is supposed to emit only members of the public alphabet Tq when V is in 
a state in Ro, pu b- This ensures that PI knows only as much as it should about the configuration of 

V at any point. 

The existential player of M has a winning strategy for this computation game [16] if and only 
if there exists a well-formed debate subtree where all paths lead to an acceptance by V. Clearly, 

V uses the same amount of memory and halts within the same number of steps with M. □ 
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Lemma 10. Given a deterministic verifier that checks a partial-information (resp. zero-information) 
debate about membership in language L, one can construct a PATM (resp. BATM) which recognizes 
the same language within the time and space bounds of the given verifier. 

Proof. We build a private alternating Turing machine M that simulates the given verifier V by 
using universal and existential moves to select refuter and prover symbols, respectively, to feed to 
V. The important point is that M takes all of its universal steps privately, and the simulation of 
V is also performed on the private work tape. If a universal branching produces a symbol from the 
public alphabet To between V and PO, M lets the existential player know about this by writing a 
copy of that symbol in the common memory area. This concludes the construction. □ 
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